OpenSSH 10.6p2 blocks long-password SSH bypass on Alpine Linux

OpenSSH, used for secure remote logins to Linux servers, has released version 10.6p2 to close a critical authentication bypass affecting some Alpine Linux systems. Attackers could use an oversized password to access accounts with no password set when password authentication was enabled and the server checked passwords without PAM. Alpine has issued patched packages; until systems are updated, administrators should disable password logins. Source

Læs hele artiklen hos kilden.